A rule that detects network connections to an SSH server is triggering constantly in response to background internet traffic and must be tuned. Which method is used to tune this rule and solve the issue?

• A.Update the Group By attribute to include only allowed host IP addresses.
• B.Increase the COUNT (Matched Events)value in the subpattern.
• C.Block connections from unauthorized networks before they reach the server.
• D.Increase the time window on the FortiSIEM rule.

Comment: *

Name: *

Email: *

Verification: *

Refer to the exhibit.

An incorrect configuration is shown.
Which setting must you change to successfully apply this configuration to FortiSIEM?

• A.Select the same values in the Fields to use for Prediction and Field to Predict sections.
• B.Set the Run Mode to ML.
• C.Set the Train factor to 70% or greater.
• D.Set the algorithm to Anomaly Detection.

Comment: *

Name: *

Email: *

Verification: *

Refer to the exhibit.

You are investigating an issue with two destination IP addresses, but you are not getting any results from the search.
Based on the filters shown in the exhibit, why is this search returning no results?

• A.You are using the wrong Boolean operator in the Next column.
• B.The two items are not grouped in parentheses ().
• C.You are using an invalid IP address in the Value column.
• D.You are using an incorrect entry in the Operator column.

Comment: *

Name: *

Email: *

Verification: *

You need a model that predicts a target field based on other fields in a dataset and then triggers an anomaly if the value does not match the prediction. Which machine learning (ML) algorithm will you use to build this type of model?

• A.Regression
• B.Anomaly detection
• C.Forecasting
• D.Classification

Comment: *

Name: *

Email: *

Verification: *

Which two settings must you configure to allow FortiSIEM to apply tags to devices in FortiClient EMS?
(Choose two.)

• A.FortiEMS API credentials defined on FortiSIEM
• B.Remediation script configured
• C.ZTNA tags defined on FortiSIEM
• D.FortiSIEM API credentials defined on FortiEMS

Comment: *

Name: *

Email: *

Verification: *